Re: [Pacemaker] authentication in the cluster

2015-02-05 Thread Kostiantyn Ponomarenko
Chrissie, thank you! =) It helps! Thank you, Kostya On Thu, Feb 5, 2015 at 3:59 PM, Christine Caulfield wrote: > On 02/05/2015 01:47 PM, Kostiantyn Ponomarenko wrote: > > Chrissie, one more thing. > > > > And I also suppose that the key is read only one time at the start-up of > > the Corosync.

Re: [Pacemaker] authentication in the cluster

2015-02-05 Thread Christine Caulfield
On 02/05/2015 01:47 PM, Kostiantyn Ponomarenko wrote: > Chrissie, one more thing. > > And I also suppose that the key is read only one time at the start-up of > the Corosync. > In other words there is no any check for the presence of the key or its > update, while Corosync is working. > Am I right

Re: [Pacemaker] authentication in the cluster

2015-02-05 Thread Kostiantyn Ponomarenko
Chrissie, one more thing. And I also suppose that the key is read only one time at the start-up of the Corosync. In other words there is no any check for the presence of the key or its update, while Corosync is working. Am I right? Thank you, Kostya On Thu, Feb 5, 2015 at 2:42 PM, Kostiantyn Pon

Re: [Pacemaker] authentication in the cluster

2015-02-05 Thread Kostiantyn Ponomarenko
Hi Chrissie, On Thu, Jan 29, 2015 at 11:44 AM, Christine Caulfield wrote: > as corosync rejects the messages > with the wrong authkey > And I suppose that it is enough just to use "crypto_hash" option. I am right? Thank you, Kostya ___ Pacemaker mail

Re: [Pacemaker] authentication in the cluster

2015-01-29 Thread Christine Caulfield
On 27/01/15 17:20, Kostiantyn Ponomarenko wrote: > Hi Chrissie, > > I know that this setup it crazy thing =) > First of all I needed to say - think about each two-node cluster as one box > with two nodes. > >> You can't connect clusters together like that. > I know that. > >> All nodes in the cl

Re: [Pacemaker] authentication in the cluster

2015-01-27 Thread Kostiantyn Ponomarenko
Hi Chrissie, I know that this setup it crazy thing =) First of all I needed to say - think about each two-node cluster as one box with two nodes. > You can't connect clusters together like that. I know that. >All nodes in the cluster have just 1 authkey file. That is true. But in this example th

Re: [Pacemaker] authentication in the cluster

2015-01-27 Thread Christine Caulfield
On 27/01/15 15:56, Kostiantyn Ponomarenko wrote: > Hi all, > > Here is a situation - there are two "two-node" clusters. > They have totally identical configuration. > Nodes in the clusters are connected directly, without any switches. > You can't connect clusters together like that. All nodes in

[Pacemaker] authentication in the cluster

2015-01-27 Thread Kostiantyn Ponomarenko
Hi all, Here is a situation - there are two "two-node" clusters. They have totally identical configuration. Nodes in the clusters are connected directly, without any switches. Here is a part of corosync.comf file: totem { version: 2 cluster_name: mycluster transport: udpu crypto_hash: sha256 c